Presidio
XDRforPartners.
Offer your clients 24/7 MDR without building a SOC.
White-label SOC platform with detection, response, forensics and compliance — ready to resell under your brand. Full open-source stack on managed infrastructure.
Why partner
Add MDR to Your Portfolio. Keep 100% of the Relationship.
Building a SOC takes years and millions. Presidio gives MSPs and MSSPs a production-ready XDR platform they can resell from day one.
Recurring Revenue
Add a high-margin MDR line to your portfolio. Per-endpoint pricing keeps margins predictable as you scale.
Zero Build Cost
Skip the multi-year SOC investment. Presidio is ready to deploy under your brand in days, not quarters.
Your Brand, Our Engine
White-label dashboards, reports and alerts. Your clients see your logo, your domain, your SLA.
Full Multitenancy
Every client is isolated end-to-end: agents, storage, dashboards, forensics and case management.
Compliance Built-In
Auto-generated reports for NIS2, GDPR Art.32 and ISO 27001. Audit-ready, always current.
Dedicated Partner Support
Technical onboarding, co-selling materials and escalation paths. We succeed when you succeed.
The stack
Six Technologies, One Platform.
Every component is open-source, integrated and orchestrated. Zero vendor lock-in. Full transparency for you and your clients.
Detection & Monitoring
Wazuh SIEM
Real-time event correlation with 16 custom rules for Italian SMEs. MTTA under 1 second.
Automation & Response
Shuffle SOAR
5 automated playbooks: from triage to remediation in under 30 seconds.
Forensics On-Demand
Velociraptor
Remote forensic analysis on any endpoint. Proactive hunting and automated collection.
Threat Intelligence
MISP
75,369 IOCs from 8 international feeds. Automatic enrichment of every alert.
Case Management
DFIR-IRIS
Structured incident management with timeline, evidence and chain of custody.
Client Dashboard
Grafana Portal
Dedicated white-label portal for each client. Real-time visibility on security posture and compliance.
How it works
First Client Live in 24 Hours.
Three steps. No hardware. No downtime for your clients.
01
Partner Onboarding
We configure your white-label environment, branding and tenant structure. Typically completed within 48 hours.
02
Client Deployment
Lightweight agent install on client endpoints. No hardware, no VPN. First client live within 24 hours.
03
Detect, Respond, Report
5 SOAR playbooks handle detection, correlation and response automatically. Compliance reports generated on demand.
<1s
MTTA
<30s
MTTR
75,369
Active IOCs
5
SOAR Playbooks
Partner pricing
Transparent Pricing, Healthy Margins.
Wholesale per-endpoint rates. You set your own end-client price. No hidden costs. No binding contracts.
Shield
Essential monitoring and compliance reporting.
Ideal for clients needing visibility without complexity.
Wazuh SIEM + base rules
Monthly compliance report
Email alerts
Dedicated Grafana dashboard
Email support
Most Popular
Sentinel
Full automation and threat intelligence.
Ideal for clients with NIS2 obligations or critical supply chains.
Everything in Shield, plus:
SOAR automation (5 playbooks)
MISP threat intelligence
Velociraptor forensics
Automatic active response
Vulnerability assessment
NIS2 + GDPR + ISO reports
Fortress
Dedicated SOC and full case management.
Ideal for clients with SOC requirements or enterprise supply chain mandates.
Everything in Sentinel, plus:
DFIR-IRIS case management
Dedicated SOC analyst
Custom detection rules
SLA: 4-hour response
On-demand compliance reports
Priority forensics
FAQ
Frequently Asked Questions.
Give Your Clients Enterprise Security. Today.
White-label deployment in 48 hours. No hardware. No SOC build. Let's talk about growing your security practice.